Principle 3 Understandable · Guideline 3.3: Input Assistance
3.3.8 Accessible Authentication (Minimum)
Logging in must not require a cognitive function test.
What this means in practice
New in WCAG 2.2. Puzzle captchas, transcribing codes or remembering patterns are not allowed without an alternative. Pasting from a password manager must not be blocked.
Normative wording
The binding text lives at the W3C. What you read here is our own faithful rendering – not a quotation.